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Debug TAP or 
software (CP14) 


Program breakpoint register and/or 
context-ID register and comparisons 
succeed with Instruction Address and/or 
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Halt/monitor 

< 1 ) 


Software breakpoint 
instruction 
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chain 4 (Instruction Transfer 
Register) through Debug TAP or 

Use BKPT instruction directly in 
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BKPT instruction must reach execution 
stage. 


Halt/monitor 
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address matches. 
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Halt instruction has been scanned in. 
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EDBGRQ input pin is asserted. 
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C): In monitor mode, breakpoints and watchpoints cannot be data-dependent. 

( 2 ): The cores have support for thread-aware breakpoints and watchpoints :vn pcAe-^o^Vjj-t- iO enable secure 
debug on some particular threads. 
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1 


R/W by programrning the ICE by the JTAG (scanl) 
■ R/W by using MRC/MCR instruction (CP 1 4) 


yes 


Secure debug 
enable bit 


0: debug in non- 
secure world only. 
1 : debug in secure 
world and non- 
secure world 


0 


In functional mode or debug monitor mode: R/W by 
using MRC/MCR instruction (CP 14) (only in secure 
supervisor mode) 

In Debug halt mode: No access - MCR/MRC 
instructions have any effect. 

(R/W by prograrnming the ICE by the JTAG (scanl) 
if JSDAEN=1 


no 
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enable bit 


0: ETM is enabled 
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world only. 

1 : ETM is enabled 

in secure world 

and non-secure 

world 
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In functional mode or debug monitor mode: R/W by 
using MRC/MCR instruction (CP 14) (only in secure 
supervisor mode) 

In Debug halt mode: No access — MCR/MRC 
instructions have any effect. 

(R/W by prograrnming the ICE by the JTAG (scanl) 
if JSDAEN=1 


no 
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mode enable 
bit 
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possible in secure 
user mode 
1 : debug is 
possible in secure 
user mode 
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In functional mode or debug monitor mode: R/W by 
using MRC/MCR instruction (CP 14) (only in secure 
supervisor mode) 

In Debug halt mode: No access - MCR/MRC 
instructions have any effect. 

(R/W by prograrnming the ICE by the JTAG (scanl) 
if JSDAEN=1 


no 
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enable bit 


0: debug is not 
possible for a 
particular thread 
1 : debug is 
possible for a 
particular thread 
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In functional mode or debug monitor mode: R/W by 
using MRC/MCR instruction (CP 14) (only in secure 
supervisor mode) 

In Debug halt mode: No access - MCR/MRC 
instructions have any effect. 

(R/W by programming the ICE by the JTAG (scanl) 
if JSDAEN=1 


no 



Figure 6/ 



Function Table 



D 


CK 


Q[n+1] 


0 




0 


1 


J~ 


1 


X 




Q[n] 



Logic Symbol 



CK > 



FIGURE €Z 



Function Table 



Logic Symbol 



D 


SI 


SE 


CK 


Q[n+1] 


0 


X 


0 




0 


1 


X 


0 




1 


X 


X 


X 




Q[n] 


X 


0 


1 




0 


X 


1 


1 




1 




— Q 



a 




FIGURE 64- 



Scan In 



Integrated 
Circuit 



JTAG 
interface 



TAP 
controller 



Scan Out 



Figure €5\ 



5*161+ 



JADI 



JTAG 
interface 



TAP 
controller 



AAA A 



Scan In 



Integrated 
Circuit 



Scan Out 



FIGURE €6 A 



Bypass 
Register 




SO 



FIGURE £6 B 



60/64- 



Instruction 
Memory 



(1) 



A 
N 

C 
H 
A 
I 

N 



(3) 



Debug 
TAP 



CORE 




(2) 



ICE 



CP14 Debug Status 
& Control Register ' 



SCAN CHAIN 1 



7r 



■C?tlf 



JSDAEN^- S60 



CP 14 bits in Debug and Status Control register 


meaning 


Secure debug enable 
bit 


Secure user-mode 
debug enable bit 


Secure thread-aware 
debug enable bit 
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X 


No intrusive debug in entire secure world is possible. 
Any debug request, breakpoints, watchpoints, and other 
mechanism to enter debug state are ignored in entire 
secure world. 
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0 


X 


Debug in entire secure world is possible 


1 


1 


0 


Debug in secure user-mode only. Any debug request, 
breakpoints, watchpoints, and other mechanism to enter 

t f A A. A 1 * A A # * * 

debug state are taken mto account in user mode only. 
(Breakpoints and watchpoints linked or not to a thread 
ID are taken into account). Access in debug is restricted 
to what secure user can have access to. 


1 


i 


1 


Debug is possible only in some particular threads. In 
that case only thread-aware breakpoints and 
watchpoints linked to a thread ID are taken into account 
to enter debug state. Each thread can moreover debug 
its own code, and only its own code. 
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CP 14 bits in Debug and Status Control register 


meaning 


Secure trace enable 
bit 
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debug enable bit 
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debug enable bit 
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No observable debug in entire secure world is possible. 
Trace module (ETM) must not trace internal core 
activity. 
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Trace in entire secure world is possible 
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. 0 


Trace is possible when the core is in secure user-mode 
only. 
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: v. ,. i 
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Trace is possible only when the core is executing some 
particular threads in secure user mode. Particular 
hardware must be dedicated for this, or re-use 
breakpoint register pair: Context ID match must enable 
trace instead of entering debug state. 
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Method of* entrv 


Entry when in non-secure world 


entry when in secure world 


Breakpoint hits 


Non-secure prefetch abort handler 


secure prefetch abort handler 


Software breakpoint instruction 


Non-secure prefetch abort handler 


secure prefetch abort handler 


Vector trap breakpoint 


Disabled for non-secure data abort 
and non-secure prefetch abort 
interruptions. For other non-secure 
exceptions, prefetch abort. 


Disabled for secure data abort and 
secure prefetch abort exceptions (*). 
For other exceptions, secure prefetch 
abort. 


Watchpoint hits 


Non-secure data abort handler 


secure data abort handler 


Internal debug request 


Debug state in halt mode 


debug state in halt mode 


External debug request 


Debug state in halt mode 


debug state in halt mode 



CQ S&L l/\£0ft>iahcn OH vector trap register, l 

(2) Note that when external or internal debug request is asserted, the core enters halt mode and not monitor mode. 
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Disabled for non-secure data abort and 
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( l ) As substitution of BKPT instruction in secure world from non-secure world is not possible, non-secure abort 
must handle the violation. 



Figure 



